TunnelCrack

TunnelCrack: Unearthing the Hidden Flaws in VPN Security

Do Son August 10, 2023

Virtual Private Networks (VPNs) have become synonymous with online privacy and security, providing an encrypted tunnel for...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 20, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 20, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 20, 2026
CVE-2026-111862CVSS 9.8
Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
Admin intel📅 Updated: Oct 17, 2026
CVE-2026-111357CVSS 7.0
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
Watchtower Verified📅 Updated: Oct 17, 2026
CVE-2025-61624CVSS 6.0
An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
CISA KEV📅 Added to KEV: Oct 16, 2026
CVE-2026-102764CVSS 9.3
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
CISA KEV📅 Added to KEV: Oct 16, 2026
CVE-2026-106931CVSS 8.5
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
Admin intel📅 Updated: Oct 15, 2026

CVE-2026-100800CVSS 9.6
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR...
📅 Updated: Oct 19, 2026
CVE-2026-102503CVSS 9.3
Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go)...
📅 Updated: Oct 19, 2026
CVE-2026-103091CVSS 9.3
Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough...
📅 Updated: Oct 19, 2026
CVE-2026-100804CVSS 9.6
Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and...
📅 Updated: Oct 19, 2026
CVE-2026-100788CVSS 9.8
Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird...
📅 Updated: Oct 19, 2026
CVE-2026-112377CVSS 9.1
CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing...
📅 Updated: Oct 19, 2026
CVE-2026-66788CVSS 9.9
A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability...
📅 Updated: Oct 19, 2026
CVE-2026-111406CVSS 9.9
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a...
📅 Updated: Oct 19, 2026